Malicious PDF — malware analysis report

Static analysis result for SHA-256 6b5dc2b6f2a33476…

MALICIOUS

PDF

46.2 KB Created: 2019-04-30 16:29:11 +03:00 Authoring application: Microsoft® Word 2016
MD5: d4f09a8c462215b1a3fe646b324af7a3 SHA-1: 530cadd838f680d2368fdeb91bbb81178bd6a01d SHA-256: 6b5dc2b6f2a3347624c9950d4ff9b4448da1368bb907cacc1ffb4e23782f056f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files hosted on the same domain. This behavior is indicative of a link farm, often used for SEO manipulation or to distribute malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8284

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/insight-and-responsibility-norton-paperback.pdf
    • http://www.gorillawalker.com/touching-the-future-technology-for-autism-ambient-intelligence-and-smart.pdf
    • http://www.gorillawalker.com/teach-yourself-the-clinton-factor-communicating-with-charisma.pdf
    • http://www.gorillawalker.com/steck-vaughn-comprehension-skills-main-idea-level-d.pdf
    • http://www.gorillawalker.com/actionable-evaluation-basics-getting-succinct-answers-to-the-most-important.pdf
    • http://www.gorillawalker.com/nicaragua-the-chamorro-years.pdf
    • http://www.gorillawalker.com/the-user-s-guide-to-natural-allergy-relief-jack-challem.pdf
    • http://www.gorillawalker.com/the-orvis-cookbook-fifty-complete-menus-for-fish-and-game.pdf
    • http://www.gorillawalker.com/practical-antenna-handbook-5-e-kindle-edition.pdf
    • http://www.gorillawalker.com/kirsten-story-collection-american-girl.pdf
    • http://www.gorillawalker.com/albert-einstein-famous-people.pdf
    • http://www.gorillawalker.com/the-texas-judgment-debtor-handbook.pdf
    • http://www.gorillawalker.com/the-downtown-anthology-6-hit-plays-from-new-york-s.pdf
    • http://www.gorillawalker.com/eating-eskofier-elite-cannibal-book-1.pdf
    • http://www.gorillawalker.com/singing-lessons-a-memoir-of-love-loss-hope-and-healing.pdf
    • http://www.gorillawalker.com/secrets-from-an-inventor-s-notebook-advice-on-inventing-success.pdf
    • http://www.gorillawalker.com/psychiatric-mental-health-nursing-8th-edition.pdf
    • http://www.gorillawalker.com/endosseous-implants-for-maxillofacial-reconstruction-1e.pdf
    • http://www.gorillawalker.com/the-big-book-of-swashbuckling-adventure-classic-tales-of-dashing.pdf
    • http://www.gorillawalker.com/the-whole-body-approach-to-osteoporosis-how-to-improve-bone.pdf
    • http://www.gorillawalker.com/memory-volume-3-a-contribution-to-experimental-psychology.pdf
    • http://www.gorillawalker.com/word-and-picture-bible-the-nlt-story-bible-series.pdf
    • http://www.gorillawalker.com/a-halloween-scare-in-boise.pdf
    • http://www.gorillawalker.com/fear-attraction-kindle-edition.pdf
    • http://www.gorillawalker.com/little-america-aerial-exploration-in-the-antarctic-the-flight-to.pdf
    • http://www.gorillawalker.com/aicpa-depository-and-lending-insitutions-banks-and-savings-institutions-credit.pdf
    • http://www.gorillawalker.com/i-die-gerechten-werden-leben-ewiglich-bei-gott-i-eine.pdf
    • http://www.gorillawalker.com/take-it-to-the-hoop.pdf
    • http://www.gorillawalker.com/lavado-de-dinero-y-corrupci-n-pol-tica-el-arte.pdf
    • http://www.gorillawalker.com/india-pakistan-ashes-1952-1999.pdf
    • http://www.gorillawalker.com/eim-habanim-semeichah-on-eretz-yisrael-redemption-and-unity.pdf
    • http://www.gorillawalker.com/the-hatherleigh-guide-to-child-and-adolescent-therapy-hatherleigh-guides.pdf
    • http://www.gorillawalker.com/questions-and-answers-on-tithes-covenant-of-prosperity.pdf
    • http://www.gorillawalker.com/absolutely-beautiful-things-decorating-inspiration-for-a-bright-and-colourful.pdf
    • http://www.gorillawalker.com/igenetics-pearson-new-international-edition-a-molecular-approach.pdf
    • http://www.gorillawalker.com/for-all-the-saints-handbell-handchime-part-2-3-octaves.pdf
    • http://www.gorillawalker.com/rights-and-wrongs-how-children-and-young-adults-evaluate-the.pdf
    • http://www.gorillawalker.com/the-essence-and-value-of-democracy.pdf
    • http://www.gorillawalker.com/the-cup-of-the-harlot-the-end-times-we-were.pdf
    • http://www.gorillawalker.com/john-singer-sargent-watercolors.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.